While frequently changing passwords is no longer considered a best practice generally [1]}, some at-risk users did this to address specific practical concerns. For example, at-risk users who have a relationship with the attacker, such as survivors of intimate partner abuse or trafficking, coped with attackers who may have ready access to their passwords (e.g., through coercion, co-presence leaks, or remote surveillance [2]}, [3]}) by regularly changing passwords on accounts known to the attacker [2]}, [5]}. Some users with visual impairments also chose to change passwords frequently in case others might have observed them inputting their passwords [6]}.
